HP Intelligent Management Center BIMS UploadServlet Information Disclosure (CVE-2014-2618)

An information disclosure vulnerability exists in the BIMS add-in module of HP Intelligent Management Center. The vulnerability is due to lack of authentication and insufficient input validation in the UploadServlet servlet when processing HTTP request parameters. By sending crafted HTTP requests...

CVE-2014-2618

CVE-2014-2618 affects HP Intelligent Management Center (iMC) and HP Branch Intelligent Management System (BIMS) prior to certain 7.0 builds. The HP bulletin describes remote information disclosure via the UploadServlet (lack of authentication and insufficient input validation) that could allow an...